x-bookmark-quote-posts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Yes—SKILL.md instructs the agent to use the in-app browser to open X pages (e.g., the user’s bookmarks and latest posts) and extract “full authored text” and “visible post text” from those pages, which is outsider-authored free text (X content) that the agent then uses as LLM context for drafting.